Function newScanSNICmd

cmd/snix/scan.go:33–123

(g *globalFlags)

}

func newScanSNICmd(g *globalFlags) *cobra.Command {
	var (
		targetIP string
		port     uint16
		conc     int
		jsonOut  bool
		topN     int
		timeout  time.Duration
		limit    int
	)
	cmd := &cobra.Command{
		Use:   "sni",
		Short: "Probe candidate SNIs against a target IP",
		Long: "Probes a curated list of Cloudflare-hosted SNIs by sending a real TLS\n" +
			"ClientHello and observing whether the handshake succeeds, is RST'd, or\n" +
			"times out. Ranks by TLS handshake time. Use the top results to populate\n" +
			"your profile's sni_pool.",
		RunE: func(cmd *cobra.Command, args []string) error {
			ctx, cancel := installSignalCancel(cmd.Context())
			defer cancel()

			ip, err := netip.ParseAddr(targetIP)
			if err != nil {
				return fmt.Errorf("invalid --target %q: %w", targetIP, err)
			}

			snis := scanner.DefaultSNICandidates
			if limit > 0 && limit < len(snis) {
				snis = snis[:limit]
			}

			fmt.Fprintf(cmd.OutOrStdout(),
				"snix scan sni: probing %d candidates against %s:%d (conc=%d, timeout=%s)\n",
				len(snis), ip, port, conc, timeout)

			var done atomic.Int32
			total := len(snis)
			start := time.Now()
			onResult := func(r scanner.Result) {
				n := done.Add(1)
				var mark string
				switch r.Outcome {
				case scanner.OutcomeOK:
					mark = "✓"
				case scanner.OutcomeDPIReset:
					mark = "✗"
				case scanner.OutcomeTimeout:
					mark = "t"
				default:
					mark = "-"
				}
				if !jsonOut {
					fmt.Fprintf(cmd.ErrOrStderr(),
						"\r[%3d/%3d] %s %-40s %s %10s",
						n, total, mark, r.SNI, r.Outcome, r.Handshake.Round(time.Millisecond))
				}
			}